WEBDIENSTE/NLnetLabs-krill
1
0
Fork 0
mirror of https://github.com/NLnetLabs/krill.git synced 2026-09-20 16:37:43 +02:00
Code Issues Packages Projects Releases Wiki Activity
384 Commits 30 Branches 93 Tags
b3a4e7b208cdc5f98cff2d5bca909dad3cd375a1
Commit Graph
384 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Tim Bruijnzeels b3a4e7b208 Remove 'KeyRef', this is all covered by 'rpki::crypto::KeyIdentifier' now. 2019-08-28 16:34:15 +02:00
Tim BruijnzeelsandGitHub a8ab4d7394 Merge pull request #69 from NLnetLabs/make-roas 
Make roas
 2019-08-28 15:40:56 +02:00
Tim Bruijnzeels ef858be696 Re-publish ROAs during key rolls. (#30) 2019-08-28 14:51:44 +02:00
Tim Bruijnzeels 69e4fda17c Update ROAs when resource entitlements change. (#30) 2019-08-28 13:44:51 +02:00
Tim Bruijnzeels 21f4119e16 Refuse authorization for prefix not held by CA. (#30) 2019-08-27 15:29:59 +02:00
Tim Bruijnzeels 5179ad9d82 Push ROA logic down to ResourceClass to make things simpler. (#30) 2019-08-27 15:11:46 +02:00
Tim Bruijnzeels 73473443b4 Add listing/updating ROAs to the CLI (#30). 2019-08-26 17:05:31 +02:00
Tim Bruijnzeels a8b17ec93d Improve testing: check that expected files are published. 2019-08-26 13:58:20 +02:00
Tim Bruijnzeels 9398c45ee4 Remove a ROA (#30). 2019-08-26 10:54:39 +02:00
Tim Bruijnzeels 6233616adf Create new ROAs (#30). 2019-08-23 12:02:46 +02:00
Tim BruijnzeelsandGitHub ae69823e95 Merge pull request #65 from NLnetLabs/cas-delegate 
Cas delegate
 2019-08-20 16:34:11 +02:00
Tim Bruijnzeels 86ea370e8f Support (great-) grandchildren under multiple lineages. Closes: #25 2019-08-20 14:01:48 +02:00
Tim Bruijnzeels fc98944d66 Split parent and resource class maps. 
This is a little more hassle when talking to a parent, however this is easier
when talking to children. Also there is now an explicit split in the names used
by the parent, and local simple (numbered) names for resources and their name-
spaces when it comes to publishing.
 2019-08-19 15:13:08 +02:00
Tim Bruijnzeels 7925e72e88 Create real type for ResourceClassName. 2019-08-19 11:18:00 +02:00
Tim Bruijnzeels 60a60fd5d2 Change the notion of being a TA to having a special parent proxy, thus making TAs and normal CAs more alike. 2019-08-16 11:40:27 +02:00
Tim Bruijnzeels f421502253 Automatically shrink certificates after the grace period expires. (Closes #55) 2019-08-15 11:47:31 +02:00
Tim Bruijnzeels 84bdd0c4fa Force update resources for child CA. 2019-08-14 16:15:09 +02:00
Tim Bruijnzeels c91abfc3ec Add revocation for revoked issued certificate to CRL. 2019-08-13 15:59:08 +02:00
Tim Bruijnzeels f4f2d726b8 Let child CA remove resource class, and request key revocations, when it looses an entitlement. (#56) 2019-08-13 15:38:37 +02:00
Tim Bruijnzeels 816c0a7be9 Avoid race condition. Only notify listeners of events after everything has been saved. 2019-08-13 11:37:30 +02:00
Tim BruijnzeelsandGitHub 54001c02e5 Merge pull request #63 from NLnetLabs/simplify-parent-ca 
Simplify parent ca
 2019-08-12 17:06:36 +02:00
Tim Bruijnzeels 3af6d08943 Simplify embedded parent/child CAs. No use for tokens here, and child cannot override parent handle. 2019-08-12 16:54:28 +02:00
Tim Bruijnzeels 00e9165388 Remove the 'remote krill parent ca option' 2019-08-12 16:18:11 +02:00
Tim Bruijnzeels 81114cc581 Use panic!, not unimplemented!, for cases that should be impossible by desing. 2019-08-12 16:05:49 +02:00
Tim BruijnzeelsandGitHub 42c57b755a Merge pull request #62 from NLnetLabs/key-rolls 
Key rolls
 2019-08-12 15:54:42 +02:00
Tim Bruijnzeels c1875b9de8 Manually finish key-roll by activating the new key. Tested with apnic. Fixes #23 2019-08-12 15:25:58 +02:00
Tim Bruijnzeels 47e0240734 Manually initialise a key roll for a CA. (#23) 2019-08-07 16:15:07 +02:00
Tim Bruijnzeels d6ac0db936 Guard key status life cycle in an enum (state machine). (#23) 2019-08-07 10:27:56 +02:00
Tim Bruijnzeels 6f61084457 Separating out ResourceClass. 2019-08-06 14:38:56 +02:00
Tim Bruijnzeels fe614d927f Clean up removed resource class and withdraw contents. Closes #50. 2019-08-06 12:47:08 +02:00
Tim Bruijnzeels baacf0e8f1 Change default to logging to file. 2019-08-06 10:54:23 +02:00
Tim Bruijnzeels c37c257821 Some cleanup 2019-08-06 10:47:11 +02:00
Tim Bruijnzeels 0c39530f22 Refreshing CA certificates in the background - not yet handling losing resources. (#50) 2019-08-05 17:23:46 +02:00
Tim Bruijnzeels 98ee1202c6 Cleanup: use rpki::x509::Time everywhere. 2019-08-05 12:54:13 +02:00
Tim Bruijnzeels 21baec11ea Do not use AKI extension in RFC6492/8181 CMS embedded CRL. 2019-08-05 12:33:50 +02:00
Tim Bruijnzeels 24b038d7ff Update child token, id_cert and/or resources. Closes #51. 2019-08-02 20:42:04 +02:00
Tim Bruijnzeels 5d2593857e Refactor events - use parent/child handle consistently for clarity. 2019-07-30 15:06:57 +02:00
Tim Bruijnzeels cd2e7133e9 Rustfmt 2019-07-30 13:58:48 +02:00
Tim Bruijnzeels 73a525c9b1 Fix interop with apnic RFC6492 (better check for CA bit) - (#13) 2019-07-26 11:30:29 -04:00
Tim Bruijnzeels 1ea10bb0cd Be more lenient in accepting RFC8181/6492 CMS structures and Id Certs - because they are poorly defined. (#13) 2019-07-24 16:26:30 -04:00
Tim Bruijnzeels b1bdd08071 Should fix the RFC6492 CMS signatures. (#13) 2019-07-24 09:47:38 -04:00
Tim Bruijnzeels d6ecccb224 Log error with base64 of RFC6492 response CMS in case response cannot be decoded. 2019-07-23 12:34:46 -04:00
Tim Bruijnzeels 9b790757f4 Ignore critical extensions on IdCert (for interop testing). 2019-07-23 11:41:52 -04:00
Tim Bruijnzeels 985126f15b Add command line options to add RFC6492 parent. 2019-07-23 11:24:31 -04:00
Tim Bruijnzeels 69b0172070 Fix build. 2019-07-23 10:21:49 -04:00
Tim Bruijnzeels 5ec918b26b Add type alias for ChildHandle -> Handle 2019-07-22 19:36:58 -04:00
Tim Bruijnzeels 29ce65ab46 Improve test for running an rfc6492 child under the embedded ta. 2019-07-22 18:47:05 -04:00
Tim Bruijnzeels 831cfed299 Renamed and organised CA code. (#13) 2019-07-22 14:02:52 -04:00
Tim Bruijnzeels 3c8e9a470c Fix racecondition (save the updated aggregate!), and deadlock (use outer_lock on pub functions). 2019-07-21 15:54:59 -04:00
Tim Bruijnzeels 2e7b6258fe Get certificate from RFC6492 parent / issue to child. (#13) 2019-07-21 15:53:37 -04:00